Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: WAGO Component: Pfc 100 Firmware Clear all filters
TI-2020-10015 CVE-2020-12522 · GHSA-qrrv-9vc8-gf2w

OS command injection in WAGO Series PFC 100

Priority MEDIUM 48

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03054 Published 2020-12-17 No fix listed CWE-78
TI-2019-03539 CVE-2019-5078 · GHSA-hjp3-mgv4-cwvx

Missing authentication in WAGO PFC200

Priority MEDIUM 43

An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01655 Published 2019-12-18 No fix listed CWE-306
TI-2019-03536 CVE-2019-5075 · GHSA-8c7x-5xg2-cr7x

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 49

An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03866 Published 2019-12-18 No fix listed CWE-787
TI-2019-03534 CVE-2019-5073 · GHSA-6853-r3p7-f8fv

Information disclosure in WAGO PFC200

Priority LOW 27

An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01621 Published 2019-12-18 No fix listed CWE-200
TI-2019-03541 CVE-2019-5080 · GHSA-753h-jhp3-85mr

Missing authentication in WAGO PFC200

Priority MEDIUM 43

An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01866 Published 2019-12-18 No fix listed CWE-306
TI-2019-03540 CVE-2019-5079 · GHSA-69j7-ff29-gmc8

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 48

An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03316 Published 2019-12-18 No fix listed CWE-787
TI-2019-03542 CVE-2019-5081 · GHSA-v636-46xh-j279

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 49

An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04521 Published 2019-12-18 No fix listed CWE-787
TI-2019-03538 CVE-2019-5077 · GHSA-wg4r-4x32-rpwp

Missing authentication in WAGO PFC200

Priority MEDIUM 43

An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC 100 Firmware version 03.00.39(12).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01643 Published 2019-12-18 No fix listed CWE-306
TI-2019-03535 CVE-2019-5074 · GHSA-cc6m-vg7g-249c

Out-of-bounds write in WAGO PFC200

Priority MEDIUM 48

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12) and WAGO PFC100 Firmwa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0328 Published 2019-12-18 No fix listed CWE-787